Re: [PATCH] scsi: libsas: Fix use-after-free in sas_suspend_devices()
From: Wentao Liang
Date: Sun Nov 08 2026 - 07:23:58 EST
Hi John,
Sorry for the very late reply.
You are right: the reference held while the device sits on port->dev_list
keeps it alive, and an LLD never owns such a reference, so
list_for_each_entry_safe() would not fix anything. Please drop this patch;
I am withdrawing it and will not send a v2.
The candidate came from a static-analysis run audited with DeepSeek and
GPT-6.1 Sol, and it is a false positive on our side.
Thanks for taking the time to review the patch,
Wentao